Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-45866

Опубликовано: 08 дек. 2023
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS3: 6.3

Описание

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

released

5.70-0ubuntu3
esm-infra/bionic

released

5.48-0ubuntu3.9+esm1
esm-infra/focal

released

5.53-0ubuntu3.7
esm-infra/xenial

released

5.37-0ubuntu5.3+esm3
focal

released

5.53-0ubuntu3.7
jammy

released

5.64-0ubuntu1.1
lunar

released

5.66-0ubuntu1.1
mantic

released

5.68-0ubuntu1.1
noble

released

5.70-0ubuntu3

Показывать по

EPSS

Процентиль: 96%
0.28214
Средний

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
redhat
почти 2 года назад

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS3: 6.3
nvd
почти 2 года назад

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.

CVSS3: 6.3
msrc
11 месяцев назад

Описание отсутствует

CVSS3: 6.3
debian
почти 2 года назад

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral ...

suse-cvrf
3 дня назад

Security update for bluez

EPSS

Процентиль: 96%
0.28214
Средний

6.3 Medium

CVSS3